Polkadot warns Fearless Wallet users to move funds after key leak

Four versions of the third-party browser extension sent private keys to an attacker-controlled server for more than a year Polkadot has a blunt message for anyone who used the Fearless Wallet browser extension since February 2025: assume your accounts are compromised, and move your funds. The warning came in a security notice published on October 21, 2026. It describes a flaw that quietly shipped users’ private keys to a server controlled by an attacker. The flaw had been live, on and off, for roughly a year and a half.